[ubuntu/disco-proposed] krb5 1.16.1-1ubuntu1 (Accepted)

[Andreas Hasenack]

krb5 (1.16.1-1ubuntu1) disco; urgency=medium

  * Merge with Debian unstable.
  * Dropped:
    - Add DEP8 tests (LP #1677881):
      + d/t/util: common functions used in the tests
      + d/t/control, d/t/kinit: simple kinit test
      + d/t/control, d/t/slapd-gssapi: DEP8 test for service principals
      [Adopted in 1.16.1-1]
  * Added:
    - d/t/util: fix typo

krb5 (1.16.1-1) unstable; urgency=medium

  * New upstream release
    - Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730], Closes: #891869
  * Install kerberos.openldap.ldif, which is probably more useful than
    kerberos.ldif if you're hoping to use the Kerberos schema on Debian.
    Also, the bugs in kerberos.ldif have been corrected; Closes: #660767
  * Suggest krb5-k5tls from krb5-user, Closes: #887937
  * Merge dep8 tests, thanks Canonical  and Andreas Hasenack (LP:
    #1677881)

Date: Mon, 12 Nov 2018 17:37:06 -0200
Changed-By: Andreas Hasenack <andreas at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/krb5/1.16.1-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 12 Nov 2018 17:37:06 -0200
Source: krb5
Binary: krb5-user krb5-kdc krb5-kdc-ldap krb5-admin-server krb5-kpropd krb5-multidev libkrb5-dev libkrb5-dbg krb5-pkinit krb5-otp krb5-k5tls krb5-doc libkrb5-3 libgssapi-krb5-2 libgssrpc4 libkadm5srv-mit11 libkadm5clnt-mit11 libk5crypto3 libkdb5-9 libkrb5support0 libkrad0 krb5-gss-samples krb5-locales libkrad-dev
Architecture: source
Version: 1.16.1-1ubuntu1
Distribution: disco
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Andreas Hasenack <andreas at canonical.com>
Description:
 krb5-admin-server - MIT Kerberos master server (kadmind)
 krb5-doc   - documentation for MIT Kerberos
 krb5-gss-samples - MIT Kerberos GSS Sample applications
 krb5-k5tls - TLS plugin for MIT Kerberos
 krb5-kdc   - MIT Kerberos key server (KDC)
 krb5-kdc-ldap - MIT Kerberos key server (KDC) LDAP plugin
 krb5-kpropd - MIT Kerberos key server (Slave KDC Support)
 krb5-locales - internationalization support for MIT Kerberos
 krb5-multidev - development files for MIT Kerberos without Heimdal conflict
 krb5-otp   - OTP plugin for MIT Kerberos
 krb5-pkinit - PKINIT plugin for MIT Kerberos
 krb5-user  - basic programs to authenticate using MIT Kerberos
 libgssapi-krb5-2 - MIT Kerberos runtime libraries - krb5 GSS-API Mechanism
 libgssrpc4 - MIT Kerberos runtime libraries - GSS enabled ONCRPC
 libk5crypto3 - MIT Kerberos runtime libraries - Crypto Library
 libkadm5clnt-mit11 - MIT Kerberos runtime libraries - Administration Clients
 libkadm5srv-mit11 - MIT Kerberos runtime libraries - KDC and Admin Server
 libkdb5-9  - MIT Kerberos runtime libraries - Kerberos database
 libkrad-dev - MIT Kerberos RADIUS Library Development
 libkrad0   - MIT Kerberos runtime libraries - RADIUS library
 libkrb5-3  - MIT Kerberos runtime libraries
 libkrb5-dbg - debugging files for MIT Kerberos
 libkrb5-dev - headers and development libraries for MIT Kerberos
 libkrb5support0 - MIT Kerberos runtime libraries - Support library
Closes: 660767 887937 891869
Launchpad-Bugs-Fixed: 1677881
Changes:
 krb5 (1.16.1-1ubuntu1) disco; urgency=medium
 .
   * Merge with Debian unstable.
   * Dropped:
     - Add DEP8 tests (LP #1677881):
       + d/t/util: common functions used in the tests
       + d/t/control, d/t/kinit: simple kinit test
       + d/t/control, d/t/slapd-gssapi: DEP8 test for service principals
       [Adopted in 1.16.1-1]
   * Added:
     - d/t/util: fix typo
 .
 krb5 (1.16.1-1) unstable; urgency=medium
 .
   * New upstream release
     - Fix flaws in LDAP DN checking, including a null dereference KDC
     crash which could be triggered by kadmin clients with administrative
     privileges [CVE-2018-5729, CVE-2018-5730], Closes: #891869
   * Install kerberos.openldap.ldif, which is probably more useful than
     kerberos.ldif if you're hoping to use the Kerberos schema on Debian.
     Also, the bugs in kerberos.ldif have been corrected; Closes: #660767
   * Suggest krb5-k5tls from krb5-user, Closes: #887937
   * Merge dep8 tests, thanks Canonical  and Andreas Hasenack (LP:
     #1677881)
Checksums-Sha1:
 6cabc61ba99e50cf79be5215fa3ebbe986d6a62d 3659 krb5_1.16.1-1ubuntu1.dsc
 8353f2d900a7d52499c7c2605d5e295f71dd5e67 9477480 krb5_1.16.1.orig.tar.gz
 4fa71a872e2c68f31d966a6d35a3621fcea4a67c 97880 krb5_1.16.1-1ubuntu1.debian.tar.xz
 1828937d037dbcfc7ae192bcdfde2422ec2b4243 6551 krb5_1.16.1-1ubuntu1_source.buildinfo
Checksums-Sha256:
 336da42e5ec3f72e5c93f3b28f1a5a942feb566ae36288aa3bfdb86fec29b8d8 3659 krb5_1.16.1-1ubuntu1.dsc
 214ffe394e3ad0c730564074ec44f1da119159d94281bbec541dc29168d21117 9477480 krb5_1.16.1.orig.tar.gz
 532b8f2cf2cd4ea6e2a5041f8a722cd017c27977fac19e59a119e5eaf1908020 97880 krb5_1.16.1-1ubuntu1.debian.tar.xz
 e1f8136ddf584e99bcd1aa80d7cb197a8290817ba0774145acb83c279fe3edcb 6551 krb5_1.16.1-1ubuntu1_source.buildinfo
Files:
 57139a770fd63f72075ce291e1957ba1 3659 net optional krb5_1.16.1-1ubuntu1.dsc
 848e9b80d6aaaa798e3f3df24b83c407 9477480 net optional krb5_1.16.1.orig.tar.gz
 ff181398623852e29eecef78ee370ed0 97880 net optional krb5_1.16.1-1ubuntu1.debian.tar.xz
 4473ad544c7b0e2ff30f45624b15958e 6551 net optional krb5_1.16.1-1ubuntu1_source.buildinfo
Original-Maintainer: Sam Hartman <hartmans at debian.org>

-----BEGIN PGP SIGNATURE-----
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=D/0h
-----END PGP SIGNATURE-----